Application Security

IAM in code, Cognito, encryption SDKs, and secrets handling in applications.

Domain 2: Security · 26% of exam · 9 questions

Question 1 of 9 · keys: 1–5 select, Enter submit, ← → navigate

Domain 2: SecurityApplication SecuritymediumSingle choice

A Lambda function needs to read items from a DynamoDB table. What's the correct way to grant the function access — following least-privilege?

Embed AWS access keys in the function codeAttach an IAM execution role with DynamoDB read permissions on that tableStore credentials in environment variablesMake the DynamoDB table publicly readable